CVE ID:	CVE-2012-5656
Description:	The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.
Test IDs:	1.3.6.1.4.1.25623.1.0.864973   1.3.6.1.4.1.25623.1.0.864979
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-5656 56965 http://www.securityfocus.com/bid/56965 FEDORA-2012-20620 http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095380.html FEDORA-2012-20621 http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095398.html FEDORA-2012-20643 http://lists.fedoraproject.org/pipermail/package-announce/2012-December/095024.html USN-1712-1 http://www.ubuntu.com/usn/USN-1712-1 [oss-security] 20121219 Re: CVE request: Inkscape fixes a XXE vulnerability during rasterization of SVG images http://www.openwall.com/lists/oss-security/2012/12/20/3 http://bazaar.launchpad.net/~inkscape.dev/inkscape/trunk/revision/11931 http://bazaar.launchpad.net/~inkscape.dev/inkscape/trunk/revision/11931 https://bugs.launchpad.net/inkscape/+bug/1025185 https://bugs.launchpad.net/inkscape/+bug/1025185 https://launchpad.net/inkscape/+milestone/0.48.4 https://launchpad.net/inkscape/+milestone/0.48.4 openSUSE-SU-2013:0294 http://lists.opensuse.org/opensuse-updates/2013-02/msg00041.html openSUSE-SU-2013:0297 http://lists.opensuse.org/opensuse-updates/2013-02/msg00043.html